$ rpki-client -vvf rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft File: V88585q2G1OO6nyy1Wo0vle4mvs.mft (raw, json) Hash identifier: HPyiSlJXP357Sz+sXwZkqwpDe31PsUdVRxjoUmR9aTk= Subject key identifier: 78:AB:F9:DB:4F:B3:4A:D7:63:B0:68:02:96:3D:45:2C:C8:90:02:1C Authority key identifier: 57:CF:39:F3:9A:B6:1B:53:8E:EA:7C:B2:D5:6A:34:BE:57:B8:9A:FB Certificate issuer: /CN=A917D4C4/serialNumber=57CF39F39AB61B538EEA7CB2D56A34BE57B89AFB Certificate serial: 068D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft Manifest number: 0688 Signing time: Sat 06 Sep 2025 14:48:17 +0000 Manifest this update: Sat 06 Sep 2025 14:48:16 +0000 Manifest next update: Sat 13 Sep 2025 14:48:16 +0000 Files and hashes: 1: V88585q2G1OO6nyy1Wo0vle4mvs.crl (hash: ieEnDog7N3k5ldBJ7rtuG2Cql9OVQ1/+5R3jnAlkajE=) 2: 6DB6146E0E2F11EDB4659653C4F9AE02.roa (hash: jVO5wSX7TJcWYZD+VE2YuDs8rKtO7MY++7pypycZONE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.crl rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1677 (0x68d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D4C4, serialNumber=57CF39F39AB61B538EEA7CB2D56A34BE57B89AFB Validity Not Before: Sep 6 14:48:16 2025 GMT Not After : Sep 13 14:48:16 2025 GMT Subject: CN=68bc49b1-d7db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:04:88:95:54:e4:5e:29:5a:6f:0d:1a:54:66: 3a:5d:7b:0f:05:13:38:29:dc:22:02:d7:e2:51:7d: f5:fb:08:d3:98:41:88:75:20:fb:81:3f:59:8b:42: d5:81:36:8c:09:46:71:e6:d6:89:30:d3:fc:08:96: 3d:fe:2d:a8:90:0d:b7:b2:75:e4:fa:e0:d8:3c:76: 03:f4:4d:72:30:8c:7e:61:ae:50:9c:ad:0d:d8:1a: 90:d8:e9:72:a8:3a:fa:9b:72:2a:3e:7a:90:ed:23: ec:61:e9:a8:01:6e:76:73:8d:cf:59:6b:37:65:fd: 6a:b0:c5:51:6a:b8:dc:44:46:7f:c4:22:11:83:b7: ef:c3:c4:67:47:4f:01:e7:f2:eb:6e:75:1b:5c:0e: 38:77:1c:2d:56:bc:72:37:e5:81:42:18:88:cd:d4: 08:98:c0:b7:06:3c:96:fa:3d:88:bf:f3:4b:8e:63: af:00:a6:26:ae:33:08:63:2d:7d:7e:37:ad:3a:0e: a1:76:d3:51:44:40:c2:31:c1:95:e5:f8:d1:7d:e0: 53:61:cd:4c:25:49:98:4b:98:34:be:ed:95:b4:f0: e5:35:a8:e5:c8:94:ea:fe:50:f1:ac:6d:7a:5f:31: 93:11:6a:6b:ef:47:a8:b5:da:11:0a:bf:17:b5:52: ac:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AB:F9:DB:4F:B3:4A:D7:63:B0:68:02:96:3D:45:2C:C8:90:02:1C X509v3 Authority Key Identifier: keyid:57:CF:39:F3:9A:B6:1B:53:8E:EA:7C:B2:D5:6A:34:BE:57:B8:9A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:71:8a:19:f8:03:82:3a:a2:e4:fd:97:9f:37:60:10:88:ac: b3:45:26:e0:1a:44:ff:04:eb:ee:1d:84:e4:65:03:b3:24:e7: 27:99:54:f0:56:18:2e:af:1d:9d:ad:90:15:79:66:3d:31:72: 03:f2:c0:59:8b:5a:4b:10:69:96:6f:9f:a9:69:74:75:eb:55: 8b:54:fb:6b:4d:87:cd:98:f0:20:be:41:b6:c7:89:34:da:42: 65:75:a7:0b:b0:b7:8b:e5:69:5f:72:1b:d5:c1:c5:b8:fc:83: 4d:8b:3c:28:2d:be:50:0d:75:de:16:80:5a:13:a5:a8:dd:61: 9c:82:8a:58:02:22:32:ce:11:ad:31:61:54:57:9e:19:cd:9c: 61:bb:e6:78:7c:35:40:c4:48:8e:4a:0b:84:86:3a:5a:2c:1e: 80:df:91:ad:e6:d3:4a:23:16:be:4e:c4:9e:42:db:9a:58:6d: 53:92:de:aa:93:02:21:96:83:0a:08:3d:e2:ff:d9:67:c0:8d: 37:9c:a3:89:81:8c:88:49:a6:3c:92:1b:b3:3d:3a:36:3e:2e: f4:70:9a:38:46:dd:40:d2:8f:71:e0:17:3d:b7:06:bd:ab:f9: 3b:55:86:49:1c:36:38:75:8e:81:ef:c4:87:78:f7:fc:a0:81: d5:b5:c6:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q0QzQxMTAvBgNVBAUTKDU3Q0YzOUYzOUFCNjFCNTM4RUVBN0NCMkQ1NkEzNEJF NTdCODlBRkIwHhcNMjUwOTA2MTQ0ODE2WhcNMjUwOTEzMTQ0ODE2WjAYMRYwFAYD VQQDEw02OGJjNDliMS1kN2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvASIlVTkXilabw0aVGY6XXsPBRM4KdwiAtfiUX31+wjTmEGIdSD7gT9Zi0LV gTaMCUZx5taJMNP8CJY9/i2okA23snXk+uDYPHYD9E1yMIx+Ya5QnK0N2BqQ2Oly qDr6m3IqPnqQ7SPsYemoAW52c43PWWs3Zf1qsMVRarjcREZ/xCIRg7fvw8RnR08B 5/LrbnUbXA44dxwtVrxyN+WBQhiIzdQImMC3BjyW+j2Iv/NLjmOvAKYmrjMIYy19 fjetOg6hdtNRREDCMcGV5fjRfeBTYc1MJUmYS5g0vu2VtPDlNajlyJTq/lDxrG16 XzGTEWpr70eotdoRCr8XtVKsmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHir+dtP s0rXY7BoApY9RSzIkAIcMB8GA1UdIwQYMBaAFFfPOfOathtTjup8stVqNL5XuJr7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDRDNC8zQTA3RTBCQThE N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9WODg1ODVxMkcxT082bnl5MVdvMHZsZTRt dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1Y4ODU4NXEyRzFPTzZueXkxV28wdmxlNG12cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDRDNC8zQTA3RTBCQThEN0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9WODg1ODVxMkcx T082bnl5MVdvMHZsZTRtdnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFcYoZ+AOCOqLk/ZefN2AQiKyzRSbgGkT/BOvuHYTkZQOzJOcnmVTw Vhgurx2drZAVeWY9MXID8sBZi1pLEGmWb5+paXR161WLVPtrTYfNmPAgvkG2x4k0 2kJldacLsLeL5WlfchvVwcW4/INNizwoLb5QDXXeFoBaE6Wo3WGcgopYAiIyzhGt MWFUV54ZzZxhu+Z4fDVAxEiOSguEhjpaLB6A35Gt5tNKIxa+TsSeQtuaWG1Tkt6q kwIhloMKCD3i/9lnwI03nKOJgYyISaY8khuzPTo2Pi70cJo4Rt1A0o9x4Bc9twa9 q/k7VYZJHDY4dY6B78SHePf8oIHVtcYO -----END CERTIFICATE-----Generated at Sat Sep 6 21:05:10 2025 by rpki-client